You may object to the use of your personal data at any time by simply sending a request to dpo@octe.eu or via your account settings.
The OCTÉ Group, including all its subsidiaries (hereinafter referred to as “OCTÉ”), is responsible for its websites, software applications, and social media accounts or pages that link to this privacy statement. The list of Group entities acting as data controllers—depending on the specific website or service—along with their precise contact details, is provided in the Appendix to this privacy policy.
When you access and use these websites and services, OCTÉ may collect certain personal data concerning you (“Personal Information”); this refers to information relating to you as an individual that allows OCTÉ to identify you, either directly (e.g., your surname or first name) or indirectly (e.g., your device’s IP address).
Such personal data may be collected when you browse the websites, use the contact form, create a customer account, or place an order.
Your personal data is subsequently subject to automated processing carried out by OCTÉ.
OCTÉ undertakes to process your personal data fairly and lawfully, in compliance with the provisions of Law No. 78-17 of 6 January 1978 (as amended) relating to data processing, files, and individual liberties, and Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, known as the “General Data Protection Regulation” (or “GDPR”). The purpose of this personal data policy is to inform you of the conditions under which OCTÉ processes your personal data, while ensuring its protection.
Accessing and using all or part of these Sites and services constitutes acceptance of the terms and conditions of this privacy statement.
What personal data is collected?
The personal information OCTÉ may collect from you will depend on the nature of our interaction. For example, OCTÉ may collect:
- title, surname, and first name
- postal address, email address, and telephone number
- professional contact details (your company name, job title and role, professional email address, your company’s physical and/or postal address, professional telephone numbers, and other information enabling us to contact you in a professional capacity)
- payment information
- connection and browsing data (connection dates and times, IP address, cookies, preferences)
- order history, products viewed, delivery issues, and complaints
- your photo and the identifier associated with your social media profile
- in the context of a job or partnership application: data contained in your CV or cover letter, and any other information voluntarily submitted during the recruitment process
When is your personal data collected?
OCTÉ collects personal data that you provide voluntarily, particularly when:
- you fill out a contact request form
- you create or update your customer account
- you place a product order
- you contact us via one of our social media channels
- you apply for a job or partnership
- you apply for a job or partnership
Fields marked with an asterisk (*) on the personal data collection forms on the Sites are mandatory. Please note that if you do not provide this data, you will not be able to use the services offered on the Sites.
When you provide personal data on the Sites concerning individuals other than yourself, you warrant that you have obtained the necessary authorizations and consents from the individuals to whom the data relates. Other technical information regarding your use of the Sites or their features—such as your browsing device’s IP address—is automatically collected via cookies based on your actions on the Sites.
On what legal grounds and for what purposes is your personal data processed?
OCTÉ processes your personal data for the corresponding purposes based on each of the following legal grounds:
For the purposes of performing the execution of a contract entered into with OCTÉ or pre-contractual measures taken at your request, your personal data are processed for the purposes of:
- managing the customer relationship: managing customer accounts, orders, payment transactions, deliveries, invoices, accounting, customer relations, complaints, outstanding payments, and legal disputes
- handling requests to exercise your rights regarding your personal data
- processing your application for employment or a collaborative arrangement, as part of pre-contractual measures taken at your request
Based on OCTÉ’s legitimate interest in improving the quality of its products and the Sites, your personal data are processed for the purposes of:
- conducting statistical analysis, prospecting, and customer selection and segmentation to improve customer insight
- organizing contests and promotional events
- offering relevant, personalized services and commercial proposals based on your specific needs and interests
Based on the consent you have provided to OCTÉ for this purpose, your personal data are processed for the purposes of:
- personalizing the Sites according to your preferences and measuring site traffic
To whom is your personal data transmitted?
The recipient of your personal data is OCTÉ.
OCTÉ may also transmit your personal data to subcontractors who process the data on its behalf and in accordance with its instructions. These subcontractor recipients include, in particular:
- the banking institution responsible for the secure payment of ordered products
- OCTÉ’s external technical service providers involved in the development, distribution, operation, and maintenance of the Sites, such as the developer and the hosting provider
- OCTÉ’s external service providers involved in improving your browsing experience on the Site
- carriers and logistics providers responsible for order deliveries.
Finally, OCTÉ may be required to disclose your personal data to third parties in compliance with a law, regulation, or decision by a regulatory or judicial authority, or—if necessary—to protect its own rights and interests, particularly in the event of a violation of the Sites’ General Terms of Use.
Is your personal data transferred outside the European Union?
OCTÉ ensures that any transfer of your personal data outside the European Union and the European Economic Area is governed by appropriate safeguards as defined by applicable regulations—such as a European Commission adequacy decision, standard contractual clauses, or any other safeguard provided for in Article 46 of the GDPR—ensuring a level of protection equivalent to that guaranteed by the GDPR. You can obtain further information regarding the safeguards implemented, where applicable, by contacting our Data Protection Officer (dpo@octe.eu).
What security measures are in place to protect your personal data?
OCTÉ implements technical and organizational security measures appropriate to the risk, in accordance with Article 32 of the GDPR, to ensure the confidentiality, integrity, and availability of your personal data. These measures include, in particular: access controls for information systems based on the “need-to-know” principle, encryption and/or pseudonymization of sensitive data, regular backups, and contractual security obligations imposed on our subcontractors. In the event of a data breach likely to pose a risk to your rights and freedoms, OCTÉ notifies the CNIL and, where necessary, the affected individuals, within the timeframes prescribed by applicable regulations.
How long is your personal data retained?
OCTÉ retains your personal data only for the duration necessary to fulfill the purposes for which it was collected and in compliance with applicable legal, regulatory, tax, or contractual obligations. We commit to not retaining your data beyond what is strictly necessary and to deleting or anonymizing it as soon as it is no longer useful or upon your request, subject to the conditions set out in applicable regulations.
Payment data is retained for the period strictly necessary to complete and secure the transaction, plus any retention periods mandated by accounting, tax, and anti-fraud regulations. OCTÉ does not retain bank card details beyond what is necessary…
